replace utils.escape with html-escape